Yes. The features of network interface I pointed are GRO/TSO/LSO and so on. Then the kernel may aggregate one big packet. BTW, I am sorry that I don't response the email in time, because I left internet for days. -----Original Message----- From: netfilter-devel-owner@xxxxxxxxxxxxxxx [mailto:netfilter-devel-owner@xxxxxxxxxxxxxxx] On Behalf Of Jan Engelhardt Sent: 2015年10月5日 5:39 To: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> Cc: Feng Gao <gfree.wind@xxxxxxxxxxx>; netfilter-devel@xxxxxxxxxxxxxxx Subject: Re: [PATCH 1/1] netfilter: ftp: Check data size before copy them into FTP buffer On Sunday 2015-10-04 22:16, Pablo Neira Ayuso wrote: >On Tue, Sep 29, 2015 at 04:49:32PM +0800, Feng Gao wrote: >> When TCP endpoint supports the windows scale option, the data size >> could be more than 65536 easily. And there are some network interface >> features which could aggregate multiple packets. So we need to check >> the datalen before copy data into the FTP buffer. > >I don't think you can go over the maximum IPv4/IPv6 packet length with >aggregation. But there are jumbo frames known to IPv6, at least in principle. Dunno if GRO/TSO/.. do that, though. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
